Re: [vserver] Kernel bug

From: Łukasz Czarniecki <luqe_at_sanki.roteh.pl>
Date: Thu 14 Feb 2008 - 08:29:46 GMT
Message-ID: <47B3FBFA.1040806@sanki.roteh.pl>

Natanael Copa pisze:
>> Which grsecurity option protects against this exploit?
>
> as mentioned UDEREF prevents it for good, but KERNEXEC alone should
> prevent the code execution that this exploits relies on.

I was suprised to find out that both of these options are unavailiable
on X86_64. Is there any specific reason for that? I'm not a grsecurity
hacker. Now it seems that AMD64 arch is less secure.

>> Can you share your config?
>
> svn cat svn://svn.alpinelinux.org/alpine-builder/trunk/kernel/vsgrsec/config
Thank you.

Lukasz Czarniecki
Received on Thu Feb 14 10:40:09 2008

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 14 Feb 2008 - 10:40:14 GMT by hypermail 2.1.8